progress
Latest CVEs
The 15 most recently published vulnerabilities affecting progress.
- CVE-2026-15968Stored XSS vulnerability in MOVEit Transfer7.1
- CVE-2026-15967MOVEit Transfer refresh-token processing does not enforce updated account restrictions7.5
- CVE-2026-15966Improper CORS handling in MOVEit Transfer7.5
- CVE-2026-10697MFA Bypass in MOVEit Transfer7.5
- CVE-2026-14932Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart6.5
- CVE-2026-14865XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX5.3
- CVE-2026-13192RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX6.5
- CVE-2026-13190PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX8.1
- CVE-2026-13189SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX7.5
- CVE-2026-13188DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX5.9
- CVE-2026-13187DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX8.1
- CVE-2026-13186AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX8.1
- CVE-2026-13185PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX8.1
- CVE-2026-13184RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX7.5
- CVE-2026-13183RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX7.5